Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
File:                     7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft (raw, json)
Hash identifier:          TKoSXbV2ZKW/Nl7FTFW3lYB+d4klYwzFyUOJId7pPMc=
Subject key identifier:   3B:B4:43:10:2C:8C:CD:52:BE:67:81:C8:2F:E3:A7:A4:12:81:BC:59
Authority key identifier: EE:0B:D0:EA:95:A1:90:C7:03:A8:5E:09:EB:C5:E5:FD:A5:CD:CE:32
Certificate issuer:       /CN=ee0bd0ea95a190c703a85e09ebc5e5fda5cdce32
Certificate serial:       01A0024AFF3FCF9D57A3C081A21A7A3200ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
Manifest number:          1A05
Signing time:             Fri 14 Aug 2026 22:01:04 +0000
Manifest this update:     Fri 14 Aug 2026 22:01:04 +0000
Manifest next update:     Sat 15 Aug 2026 22:01:04 +0000
Files and hashes:         1: 7gvQ6pWhkMcDqF4J68Xl_aXNzjI.crl (hash: aa7tePa/osy8qVFrN+vvQxSiRaP1vxABwXTCavzPBJ4=)
                          2: Ds44zfxwoX0zZ-7ulrX3xVDM_S4.roa (hash: m7dxG9EvyLpUsK5NhHcjeFergHlbX9Ot5AbzRhpjiiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4a:ff:3f:cf:9d:57:a3:c0:81:a2:1a:7a:32:00:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee0bd0ea95a190c703a85e09ebc5e5fda5cdce32
        Validity
            Not Before: Aug 14 22:01:04 2026 GMT
            Not After : Aug 15 22:01:04 2026 GMT
        Subject: CN=3bb443102c8ccd52be6781c82fe3a7a41281bc59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:57:ae:92:b9:ac:6a:27:23:fc:50:96:6e:d3:
                    6d:43:0d:4f:28:c8:a2:9a:3a:cf:b6:66:c2:50:e9:
                    48:8f:2b:b7:cb:c8:4a:d2:f6:f3:d8:0a:db:23:8a:
                    95:d3:58:8a:eb:d4:a2:f6:39:38:47:27:7a:b2:95:
                    94:d3:55:c8:24:a9:21:bd:57:be:41:61:c7:7a:4a:
                    dd:d2:0b:ba:38:2b:a2:ca:9d:8e:0e:a8:fb:90:d7:
                    f9:1f:1c:63:f9:26:5f:b5:0d:be:f3:d2:d9:7e:c2:
                    a9:40:73:d7:26:f9:74:9b:44:31:3c:a0:de:be:f1:
                    11:9a:7b:09:ee:ec:ac:89:58:9e:8a:5d:d9:26:d5:
                    35:7f:45:f7:21:6b:7a:fe:50:80:b9:7f:9e:c3:94:
                    50:9d:9a:b8:e7:3a:11:04:d8:56:81:f8:6e:31:7d:
                    bd:e3:af:7e:5c:0e:1f:17:ca:9d:9d:fa:e7:f8:a9:
                    fb:33:db:de:bc:37:ad:25:10:12:11:13:31:27:06:
                    49:59:1e:a2:53:08:49:ba:c5:b0:b5:fb:a8:c1:55:
                    98:a8:a8:8e:94:f3:a5:6c:c9:c7:63:57:aa:69:17:
                    17:f6:9a:54:bd:ba:10:4c:dd:d7:91:2e:8d:1d:5e:
                    76:30:3a:37:48:14:12:63:93:a6:87:78:a3:d8:a7:
                    d7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B4:43:10:2C:8C:CD:52:BE:67:81:C8:2F:E3:A7:A4:12:81:BC:59
            X509v3 Authority Key Identifier:
                keyid:EE:0B:D0:EA:95:A1:90:C7:03:A8:5E:09:EB:C5:E5:FD:A5:CD:CE:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:52:a2:dd:5e:0a:c3:fe:52:96:04:63:65:0b:f5:58:58:98:
         2d:7a:03:96:ea:4d:a9:0e:8e:a7:db:f4:2e:e8:ee:01:f1:5b:
         31:69:3b:02:62:89:00:6a:51:6e:5e:6a:4c:44:23:55:a9:aa:
         ce:19:32:48:0b:01:88:b0:9f:a7:9d:a6:5b:5a:71:d1:12:73:
         4c:0c:99:99:5b:d8:fe:ff:28:9c:4d:dd:2f:b1:56:64:79:f4:
         a7:cc:15:bf:80:53:bd:ea:00:51:52:69:95:77:c3:27:f2:c3:
         52:f3:61:62:36:a4:0a:01:ff:fa:89:d3:f0:33:47:c8:58:40:
         e0:26:f6:79:a8:02:e1:32:56:9d:7a:79:9e:cd:d2:7c:dc:a1:
         01:88:c2:1a:93:2e:c2:1b:d3:e2:c6:24:87:a0:75:85:90:d8:
         1d:f2:90:75:c5:48:2e:e5:10:7f:e2:97:e8:36:38:ea:50:b1:
         43:9d:a9:a0:92:09:ed:f1:03:52:9a:5f:3f:96:60:90:5b:4a:
         98:d8:a9:cf:08:78:63:89:84:48:e9:0d:62:c7:d1:46:54:fe:
         59:7f:52:8f:1d:47:01:1a:5d:40:cb:d7:76:6c:c4:db:cb:fa:
         25:cd:4c:cd:84:f2:01:fb:27:68:eb:9d:d3:1b:b8:aa:a9:dd:
         70:64:d9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:37:04 2026 by rpki-client